Integrated Oncology Network Under Investigation for Data Breach of Over 113,000 Patient Records
Schubert Jonckheer & Kolbe LLP is investigating a data breach that led to unauthorized access to information of 113,789 patients held by Integrated Oncology Network (ION). ION is a Tennessee-based company that owns and provides administrative services to oncology physician practices.
As of July 8, 2025, ION reported to the United States Department of Human and Health Services that twenty of its locations were affected by an email phishing incident that resulted in unauthorized access to a limited number of email and SharePoint accounts between December 13 and December 16, 2024. Unauthorized actors accessed certain emails and files containing patient information.
The twenty locations are: South Georgia Center for Cancer Care, LLC; Rocky Mountain Oncology Care; PET Imaging of Tulsa; PET Imaging of Sugar Land; PET Imaging of Houston Medical Center; PET Imaging of Dallas Northeast; Mojave Radiation Oncology Medical Group; e+ Oncologics Louisiana, LLC; Cancer Care Center of North Florida-Lake Butler; California Cancer Associates for Research and Excellence – Fresno; Southwest Urology; Radiation Oncology Network of Southern California, LLC; PET Imaging of The Woodlands; PET Imaging of Northern Colorado; Orange County Radiation Oncology Medical Group; Lake City Cancer Care, LLC; Fairbanks Urology; Denali Biomedical, California Cancer Associates for Research and Excellence – High Desert; and Bardmoor Cancer Center.
Although the breach occurred in December 2024, ION did not begin notifying affected individuals until on or around June 27, 2025, which may have violated state and federal laws. The following information may have been compromised in the breach: Social Security numbers, addresses, dates of birth, financial account information, diagnosis, lab results, medication, treatment information, health insurance and claims information, provider names, and/or dates of treatment.
If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to ION’s cybersecurity practices.
If you received notification of this data breach or are a patient of ION and wish to obtain additional information about your legal rights, please fill out the form below.
